Amazon QuickSight supports fine grained permissions for capabilities with APIs for IAM Identity Center users

Amazon QuickSight now supports user level custom permissions profile assignment for IAM Identity Center users. Custom permissions profiles enable administrators to restrict access to capabilities in the QuickSight application by adding the profile to a user. A custom permissions profile defines which capabilities are disabled for a user or role. For example, administrators can restrict specific users from exporting data to excel and csv and prevent users from sharing QuickSight assets.

Custom permissions profiles are managed with the following APIs: CreateCustomPermissions, ListCustomPermissions, DescribeCustomPermissions, UpdateCustomPermissions and DeleteCustomPermissions. Custom permissions assignment to users is managed with the following APIs: UpdateUserCustomPermission and DeleteUserCustomPermission. These APIs are supported with all identity types in QuickSight.

This feature is available in all AWS Regions where Amazon QuickSight is available. To learn more, see Customizing access to Amazon QuickSight capabilities.